Github Actions with no permission

SonarQube Server / Community Build
1

Recently i upgraded my licence and also the version from 10.7 to 2025.1.

Where i finished, all my Github Action workflows stoped working with the following message:

ERROR You’re not authorized to analyze this project or the project doesn’t exist on SonarQube and you’re not authorized to create it. Please contact an administrator.

WHAT HAVE I DONE SO FAR?

  1. I generated a new Token for the SONAR_TOKEN and updated in Github

The repository is listed as one of the projects for the user.

image
image3420×722 105 KB

The user has all the permissions i could give

image
image3388×1136 263 KB

image
image3430×1244 234 KB

Also:
❯ curl -s -u “${SONAR_TOKEN}:” “${SONAR_HOST_URL}/api/authentication/validate”
{“valid”:true}%

❯ curl -s -u “${SONAR_TOKEN}:” “${SONAR_HOST_URL}/api/projects/search?projects=${APP_CORE_PROJECT_KEY}”
{“errors”:[{“msg”:“Insufficient privileges”}]}%

LOGS FROM ACTION:

DEBUG → POST ***/api/ce/submit?projectKey=app-core&characteristic=devOpsPlatformUrl%3Dhttps%3A%2F%2Fapi.github.com&characteristic=devOpsPlatformProjectIdentifier%3Dodatacenter%2Fapp-core&characteristic=pullRequest%3D996 (573735-byte body)

21:06:22.755 DEBUG ← 403 ***/api/ce/submit?projectKey=app-core&characteristic=devOpsPlatformUrl%3Dhttps%3A%2F%2Fapi.github.com&characteristic=devOpsPlatformProjectIdentifier%3Dodatacenter%2Fapp-core&characteristic=pullRequest%3D996 (24ms, unknown-length body)

21:06:22.755 DEBUG Error response content:

Attention Required! | Cloudflare body{margin:0;padding:0} 
<div class="cf-alert cf-alert-error cf-cookie-error" id="cookie-alert" data-translate="enable_cookies">Please enable cookies.</div>

<div id="cf-error-details" class="cf-error-details-wrapper">

  <div class="cf-wrapper cf-header cf-error-overview">

    <h1 data-translate="block_headline">Sorry, you have been blocked</h1>

    <h2 class="cf-subheadline"><span data-translate="unable_to_access">You are unable to access</span> opendata.center</h2>

  </div><!-- /.header -->

  <div class="cf-section cf-highlight">

    <div class="cf-wrapper">

      <div class="cf-screenshot-container cf-screenshot-full">

          <span class="cf-no-screenshot error"></span>

      </div>

    </div>

  </div><!-- /.captcha-container -->

  <div class="cf-section cf-wrapper">

    <div class="cf-columns two">

      <div class="cf-column">

        <h2 data-translate="blocked_why_headline">Why have I been blocked?</h2>

        <p data-translate="blocked_why_detail">This website is using a security service to protect itself from online attacks. The action you just performed triggered the security solution. There are several actions that could trigger this block including submitting a certain word or phrase, a SQL command or malformed data.</p>

      </div>

      <div class="cf-column">

        <h2 data-translate="blocked_resolve_headline">What can I do to resolve this?</h2>

        <p data-translate="blocked_resolve_detail">You can email the site owner to let them know you were blocked. Please include what you were doing when this page came up and the Cloudflare Ray ID found at the bottom of this page.</p>

      </div>

    </div>

  </div><!-- /.section -->

21:06:22.761 ERROR You’re not authorized to analyze this project or the project doesn’t exist on SonarQube and you’re not authorized to create it. Please contact an administrator.

java.lang.IllegalStateException: Failed to upload report: You’re not authorized to analyze this project or the project doesn’t exist on SonarQube and you’re not authorized to create it. Please contact an administrator.

at org.sonar.scanner.report.ReportPublisher.upload(ReportPublisher.java:243)

at org.sonar.scanner.report.ReportPublisher.execute(ReportPublisher.java:163)

at org.sonar.scanner.scan.SpringProjectScanContainer.doAfterStart(SpringProjectScanContainer.java:178)

at org.sonar.core.platform.SpringComponentContainer.startComponents(SpringComponentContainer.java:226)

at org.sonar.core.platform.SpringComponentContainer.execute(SpringComponentContainer.java:205)

at org.sonar.scanner.bootstrap.SpringScannerContainer.doAfterStart(SpringScannerContainer.java:350)

at org.sonar.core.platform.SpringComponentContainer.startComponents(SpringComponentContainer.java:226)

at org.sonar.core.platform.SpringComponentContainer.execute(SpringComponentContainer.java:205)

at org.sonar.scanner.bootstrap.SpringGlobalContainer.doAfterStart(SpringGlobalContainer.java:142)

at org.sonar.core.platform.SpringComponentContainer.startComponents(SpringComponentContainer.java:226)

at org.sonar.core.platform.SpringComponentContainer.execute(SpringComponentContainer.java:205)

at org.sonar.scanner.bootstrap.ScannerMain.runScannerEngine(ScannerMain.java:151)

at org.sonar.scanner.bootstrap.ScannerMain.run(ScannerMain.java:66)

at org.sonar.scanner.bootstrap.ScannerMain.main(ScannerMain.java:52)

Caused by: org.sonar.api.utils.MessageException: You’re not authorized to analyze this project or the project doesn’t exist on SonarQube and you’re not authorized to create it. Please contact an administrator.

  <div class="cf-error-footer cf-wrapper w-240 lg:w-full py-10 sm:py-4 sm:px-8 mx-auto text-center sm:text-left border-solid border-0 border-t border-gray-300">

<p class="text-13">

  <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">99c044a1ff98fbee</strong></span>

  <span class="cf-footer-separator sm:hidden">&bull;</span>

  <span id="cf-footer-item-ip" class="cf-footer-item hidden sm:block sm:mb-1">

    Your IP:

    <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button>

    <span class="hidden" id="cf-footer-ip">177.39.17.68</span>

    <span class="cf-footer-separator sm:hidden">&bull;</span>

  </span>

  <span class="cf-footer-item sm:block sm:mb-1"><span>Performance &amp; security by</span> <a rel="noopener noreferrer" href="[https://www.cloudflare.com/5xx-error-landing](https://www.cloudflare.com/5xx-error-landing)" id="brand_link" target="\_blank">Cloudflare</a></span>

</p>

<script>(function(){function d(){var b=a.getElementById("cf-footer-item-ip"),c=a.getElementById("cf-footer-ip-reveal");b&&"classList"in b&&(b.classList.remove("hidden"),c.addEventListener("click",function(){c.classList.add("hidden");a.getElementById("cf-footer-ip").classList.remove("hidden")}))}var a=document;document.addEventListener&&a.addEventListener("DOMContentLoaded",d)})();</script>

</div><!-- /#cf-error-details -->
, headers: {cache-control=\[private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\], cf-ray=\[99c044a1ff98fbee-GRU\], content-type=\[text/html; charset=UTF-8\], date=\[Sun, 09 Nov 2025 21:05:24 GMT\], expires=\[Thu, 01 Jan 1970 00:00:01 GMT\], nel=\[{"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}\], referrer-policy=\[same-origin\], report-to=\[{"group":"cf-nel","max_age":604800,"endpoints":\[{"url":"[https://a.nel.cloudflare.com/report/v4?s=K7qBGyw8r2V7q%2FgRCiMU8qY45rUgJ64K4gYrugiiKvORHaK5UQhrMTgxDYGfF3SLtvQFfG6y4YAoTe8N3IB1lwk4LbZWYqupoenoj%2Fsp62PJg09YFkjGUF57y4u9rvRvRg%3D%3D](https://a.nel.cloudflare.com/report/v4?s=K7qBGyw8r2V7q%2FgRCiMU8qY45rUgJ64K4gYrugiiKvORHaK5UQhrMTgxDYGfF3SLtvQFfG6y4YAoTe8N3IB1lwk4LbZWYqupoenoj%2Fsp62PJg09YFkjGUF57y4u9rvRvRg%3D%3D)"}\]}\], server=\[cloudflare\], vary=\[accept-encoding\], x-frame-options=\[SAMEORIGIN\]}

21:06:22.765 DEBUG Cleanup org.eclipse.jgit.util.FS$FileStoreAttributes$$Lambda$392/0x000079cc882fef50@184dbacc during JVM shutdown

21:06:23.204 DEBUG Java command exited with code 1

21:06:23.204 INFO EXECUTION FAILURE

21:06:23.206 INFO Total time: 52.002s

Developer Edition v2025.1 (102418)

2

Hello,

It appears that Cloudflare is blocking the incoming traffic. To resolve this, please review your Cloudflare configuration and logs to determine the cause—common reasons include request body size limits or blocked POST requests.

This issue is likely unrelated to SonarQube itself and is controlled by Cloudflare’s Web Application Firewall (WAF) settings.